This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: LZDRlNvQ8kBYfVgtLpSe9q+WHeYtREVRfH7Ka/noelM= Subject key identifier: 49:D3:B9:D7:3B:3C:1C:6A:B9:64:60:B1:28:F5:F8:82:63:15:0E:8E Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 6857E6FE92DF2D4F8BD13A1680F9013BCC14EB58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 01E4 Signing time: Thu 04 Dec 2025 18:01:58 +0000 Manifest this update: Thu 04 Dec 2025 17:56:58 +0000 Manifest next update: Mon 08 Dec 2025 05:19:58 +0000 Files and hashes: 1: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: ncYGXRGoDNxvYIX3PcGqdrJLj1FxUvjJrqOvy1GAKxo=) 2: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: ToVoBImdWXlpSwTR49fJf5Jd5PA2sX/iSQaBcKA8+io=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:19:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:57:e6:fe:92:df:2d:4f:8b:d1:3a:16:80:f9:01:3b:cc:14:eb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Dec 4 17:56:58 2025 GMT Not After : Dec 8 05:19:58 2025 GMT Subject: CN=49D3B9D73B3C1C6AB96460B128F5F88263150E8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0b:7e:33:83:6a:a1:6b:a6:b8:24:cc:8a:61: 48:49:b7:11:26:70:10:6d:5d:dd:bd:ed:1d:ab:d9: 5a:ba:e5:49:8c:4e:20:0c:49:88:5b:99:06:a5:eb: fa:cf:c9:26:d7:0f:1b:b1:09:a5:2f:e4:0f:f7:b0: 1b:a5:a6:33:1d:e6:9d:db:32:e8:46:ac:81:e5:0e: 5c:df:d0:cd:73:86:66:4c:5d:88:ae:89:2b:89:b5: d8:a8:52:06:21:63:0d:c9:66:c2:20:2e:b6:00:3a: e0:23:3c:96:3e:45:2c:7f:16:4c:dd:9d:5f:de:30: 23:c1:11:36:62:60:55:e5:1d:f9:8c:c4:64:a2:f9: 48:4c:25:78:af:e3:d8:a5:cc:b6:b7:f4:cf:fe:02: a4:4a:d4:1d:91:9b:3a:4f:14:89:0a:e5:62:60:ba: 4b:39:72:a0:43:a1:40:a4:38:23:72:c5:cf:f8:1e: 7d:8b:00:c8:fc:f1:f2:51:aa:6b:15:80:82:55:be: 4a:f1:d3:f4:ed:2d:25:bc:a9:59:53:78:2e:81:8b: ef:21:67:d2:b3:fb:dd:7d:6e:11:76:a2:50:b2:e4: 02:77:3c:7c:73:ba:80:18:c6:df:ac:d1:f6:b9:14: 7a:2d:bd:ad:30:9b:40:de:71:9c:2d:d4:fb:89:ba: 18:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D3:B9:D7:3B:3C:1C:6A:B9:64:60:B1:28:F5:F8:82:63:15:0E:8E X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8c:6b:bc:cf:06:9f:ce:b3:f8:23:2a:ec:9a:a6:12:b6:66: 26:90:65:8a:e8:92:c4:92:a1:03:d4:a8:ef:81:ad:88:af:34: cd:a4:13:a6:05:58:89:7f:2e:9e:d1:8e:42:ff:fb:f4:3a:21: fc:42:8e:aa:91:a9:34:8a:c6:b4:e5:d4:78:f6:93:12:73:ba: c9:95:8d:17:79:e8:cc:ee:d9:d7:9b:d1:46:97:99:b5:f6:e9: d5:19:46:5a:f4:1a:ac:f1:d9:35:ab:4f:5e:0d:93:b0:a6:26: 58:80:bd:45:9c:94:5a:97:89:81:d8:24:65:a4:00:2d:43:32: d6:9e:11:0a:e7:58:da:49:57:75:95:b5:ad:4d:bb:40:23:05: 10:6f:c3:65:b2:a2:84:99:6e:59:33:0d:e2:2e:a3:04:ac:c0: 9f:bc:44:d9:58:d7:07:37:0b:37:f3:da:bf:4d:fe:df:2f:30: f5:26:27:a0:33:d1:c2:e8:20:09:72:1d:14:e8:9a:63:64:07: 10:33:12:cc:1f:3d:a2:42:76:76:f1:d4:8e:e4:51:57:2f:17: 71:13:62:d6:50:a7:a7:71:2d:10:72:84:3c:6c:0f:bf:52:34: bc:d1:d0:df:96:31:24:d8:8b:f1:55:e4:5b:0d:96:23:8f:31: d3:fa:6b:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFfm/pLfLU+L0ToWgPkBO8wU61gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNTEyMDQxNzU2NThaFw0yNTEyMDgwNTE5NThaMDMxMTAvBgNV BAMTKDQ5RDNCOUQ3M0IzQzFDNkFCOTY0NjBCMTI4RjVGODgyNjMxNTBFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcC34zg2qha6a4JMyKYUhJtxEm cBBtXd297R2r2Vq65UmMTiAMSYhbmQal6/rPySbXDxuxCaUv5A/3sBulpjMd5p3b MuhGrIHlDlzf0M1zhmZMXYiuiSuJtdioUgYhYw3JZsIgLrYAOuAjPJY+RSx/Fkzd nV/eMCPBETZiYFXlHfmMxGSi+UhMJXiv49ilzLa39M/+AqRK1B2RmzpPFIkK5WJg uks5cqBDoUCkOCNyxc/4Hn2LAMj88fJRqmsVgIJVvkrx0/TtLSW8qVlTeC6Bi+8h Z9Kz+919bhF2olCy5AJ3PHxzuoAYxt+s0fa5FHotva0wm0DecZwt1PuJuhgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSdO51zs8HGq5ZGCxKPX4gmMVDo4wHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6Ma7zPBp/Os/gjKuyaphK2ZiaQZYroksSS oQPUqO+BrYivNM2kE6YFWIl/Lp7RjkL/+/Q6IfxCjqqRqTSKxrTl1Hj2kxJzusmV jRd56Mzu2deb0UaXmbX26dUZRlr0Gqzx2TWrT14Nk7CmJliAvUWclFqXiYHYJGWk AC1DMtaeEQrnWNpJV3WVta1Nu0AjBRBvw2WyooSZblkzDeIuowSswJ+8RNlY1wc3 Czfz2r9N/t8vMPUmJ6Az0cLoIAlyHRTommNkBxAzEswfPaJCdnbx1I7kUVcvF3ET YtZQp6dxLRByhDxsD79SNLzR0N+WMSTYi/FV5FsNliOPMdP6a/k= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:29 2025 by rpki-client